last executing test programs:

9m1.523837163s ago: executing program 3 (id=1016):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x20000000, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, 0x0, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004f00)={&(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)=[{&(0x7f00000006c0)={0xc8, 0x42, 0x200, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x13b, 0x0, 0x0, @u32=0x1000}, @typed={0x8, 0x113, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x9a}, @generic="17f4ba62cf83ba6209b62f31f785c331cfb56f3866cf98bc61d490677a65accde48aca653b3aa71d3dab53a1bacfe0bda0ce0b6a40217b7540102268fd6cad341397b48f0d619fb9686994ef488a7991afcabd", @nested={0x4d, 0x61, 0x0, 0x1, [@generic="dd89ce5fa194c3fe596536e465c9f5f7bb740b1e87af2793ee1963b4dbfbbb9a36493799f6aeb7af25d074a0a56835c69ded61cb1845b0c9a8ae15a8f3", @typed={0x8, 0xbf, 0x0, 0x0, @uid}, @nested={0x4, 0xc3}]}]}, 0xc8}, {&(0x7f0000000940)={0x238, 0x3d, 0x300, 0x70bd28, 0x25dfdbff, "", [@nested={0x12e, 0x13f, 0x0, 0x1, [@typed={0x8, 0xa6, 0x0, 0x0, @uid}, @generic="3a31243aaa61be6eb0d0849635cad3c1e36d651e82d90ea1e392d6d31047f3e42ed556b979a05529d5888be4d2b7d81ffa0a92ff0941259fa34a80f43c377db87b3b948fd622269a92a71ca94dd57b14a190b3a8cdc51c0a17edd429689e725ec515d670509e4db47cdf2ba47962e76a042ae8f51a1e2fa807539c04071ffa7a2252d657944debf1e5a05242d88d382820d937b0dd5f7fb1d8edae4712d9c8098f21f2", @generic="d0e259cb51ff0260a8ef0e738049b126a388b1b0d64b34e03e64cf756284341aefbf03bb943850e0615ba419b1e59d01c405372922ad786913e5f3a027db31f6ac76833aa8e23f39b3154a4013bff29a2db54c79a1a250335660d18d5ea3d7327e2664a55560762d33a4808787fe3d72461aa5", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x7fff}]}, @generic="7dea362a49e01abbd6a36d16ae37f213c618483d52abfcf57f61ea4effa7779e33f17ca5b13f1f9248c6bab35ddce3ddb45af91c3dbc0ea683a99d9ee6efa14b17220464104a60264e459b6981021b99a740df7310eb54130dd14994bf7b2a1902d27a6a45aeb0a0cde05ced7921c3d11fce91e7d6aed31f57402274e5ff3b9322d5d2bc62a68879d5fbede6bf7f8dd5bab2", @typed={0x61, 0x8, 0x0, 0x0, @binary="3b2f62c9d9756a277276b853d71913895d73baf68271fa93ba4c34ba9dd454ef604cb5493e743bf5b87ad9a87bf288c772226411b1e069acccb3bb26bc9178abbb2c8ac5a3b10e47c56f017bac4057991d3815bcaa83770108e9921911"}]}, 0x238}], 0x2, &(0x7f0000004e80)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r0]}}], 0x48, 0xc001}, 0x4)
r1 = openat$ttyS3(0xffffff9c, 0x0, 0x131040, 0x0)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000300)=""/120)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r5}, 0x38)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000002040)={0x0, 0xfffffffffffffffb, 0x4a, 0x5, @scatter={0x8, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/104, 0x68}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/141, 0x8d}, {&(0x7f0000001cc0)=""/216, 0xd8}, {&(0x7f0000001dc0)=""/203, 0xcb}]}, &(0x7f0000001ec0)="b5db4bc918cd6496fe467e404baa0ae43ec0af6341e4212224a5003e1a6a10af6260d10da0a8467b9261736b238ef4daf08ff013d27e33ce89b86a604a9772d6f88f2894173b9dbb5d2e", &(0x7f0000001f40)=""/174, 0x8001, 0x1002f, 0x2, &(0x7f0000002000)})
r7 = dup(r6)
sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
mount(&(0x7f00000001c0)=@sr0, &(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000780)='gfs2\x00', 0x221000d, 0x0)

8m58.595160067s ago: executing program 3 (id=1021):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000100008000000000000000612eb401d19c950ee19900000005000000fbffffff0000001d3421b8d4a8620000000000374f3b"])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
close(0xffffffffffffffff)

8m57.017275322s ago: executing program 3 (id=1026):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4)
r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
r5 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000000000000010000009500190000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r8, 0x0, 0xffffffdb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

8m55.685028028s ago: executing program 3 (id=1027):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c8)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x2000000002, 0x9, 0x3}}, 0x28)
read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0x2020)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r3, 0x0, r2, 0x0, 0x6, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000140)={0x1, 0x2, 0x12})
pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00')
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0182101, &(0x7f00000023c0)={0x0, <r5=>0x0})
ioprio_get$pid(0x2, r5)
openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7b9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x87ff, 0x1}, 0xe)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x7d}, 0x2)

8m52.591544967s ago: executing program 3 (id=1036):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000400)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000340)=0xfffffffffffffff9, 0x12)
r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101)
dup(0xffffffffffffffff)
r4 = timerfd_create(0x8, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0)
clock_adjtime(0x4, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000001)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, 0x0)
ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0)
r8 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r11}})
io_uring_enter(r8, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)

8m51.821633051s ago: executing program 3 (id=1040):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = syz_open_dev$I2C(0x0, 0x1, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x2)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x2, 0x3, &(0x7f0000000000)={0x3, "7f4db02b9364453861def264ebcddff888df0437600c9212862e488cc2a19de8ee"}})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
mmap(&(0x7f00008c9000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r3, 0x100300)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}}, 0x0)

8m50.78662496s ago: executing program 32 (id=1040):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = syz_open_dev$I2C(0x0, 0x1, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x2)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x2, 0x3, &(0x7f0000000000)={0x3, "7f4db02b9364453861def264ebcddff888df0437600c9212862e488cc2a19de8ee"}})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
mmap(&(0x7f00008c9000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r3, 0x100300)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}}, 0x0)

4m49.38820613s ago: executing program 2 (id=1675):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$radio(0x0, 0x3, 0x2)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$addseals(r2, 0x409, 0x8)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000100010002d0100000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff0000008030000"], 0x20}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="801400000421000041fda70e0000003b009f460372fae0cae5f66e14a3d6302747888aa1930451d348c184c110bf01c2d4ab8b2dbb1593b08e3d9934f8b06923c7501ecec693f3284209caac12"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, r5, 0x4, 0xfffffffe, 0x0, 0x2, 0x0, 0x1, 0x73})
pselect6(0x95, &(0x7f00000001c0)={0x3f, 0xffffffffffffff7e, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)

4m47.322355667s ago: executing program 2 (id=1680):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x20000000, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, 0x0, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004f00)={&(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)=[{&(0x7f00000006c0)={0xc8, 0x42, 0x200, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x13b, 0x0, 0x0, @u32=0x1000}, @typed={0x8, 0x113, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x9a}, @generic="17f4ba62cf83ba6209b62f31f785c331cfb56f3866cf98bc61d490677a65accde48aca653b3aa71d3dab53a1bacfe0bda0ce0b6a40217b7540102268fd6cad341397b48f0d619fb9686994ef488a7991afcabd", @nested={0x4d, 0x61, 0x0, 0x1, [@generic="dd89ce5fa194c3fe596536e465c9f5f7bb740b1e87af2793ee1963b4dbfbbb9a36493799f6aeb7af25d074a0a56835c69ded61cb1845b0c9a8ae15a8f3", @typed={0x8, 0xbf, 0x0, 0x0, @uid}, @nested={0x4, 0xc3}]}]}, 0xc8}, {&(0x7f0000000940)={0x1c4, 0x3d, 0x300, 0x70bd28, 0x25dfdbff, "", [@nested={0x8b, 0x13f, 0x0, 0x1, [@typed={0x8, 0xa6, 0x0, 0x0, @uid}, @generic="d0e259cb51ff0260a8ef0e738049b126a388b1b0d64b34e03e64cf756284341aefbf03bb943850e0615ba419b1e59d01c405372922ad786913e5f3a027db31f6ac76833aa8e23f39b3154a4013bff29a2db54c79a1a250335660d18d5ea3d7327e2664a55560762d33a4808787fe3d72461aa5", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x7fff}]}, @generic="7dea362a49e01abbd6a36d16ae37f213c618483d52abfcf57f61ea4effa7779e33f17ca5b13f1f9248c6bab35ddce3ddb45af91c3dbc0ea683a99d9ee6efa14b17220464104a60264e459b6981021b99a740df7310eb54130dd14994bf7b2a1902d27a6a45aeb0a0cde05ced7921c3d11fce91e7d6aed31f57402274e5ff3b9322d5d2bc62a68879d5fbede6bf7f8dd5bab2827ab76218d2649b658320c249e56ced24f6d5f69e4adce6003af5e608b4969d32ba3ea30049dd5f02d37ead95964730", @typed={0x61, 0x8, 0x0, 0x0, @binary="3b2f62c9d9756a277276b853d71913895d73baf68271fa93ba4c34ba9dd454ef604cb5493e743bf5b87ad9a87bf288c772226411b1e069acccb3bb26bc9178abbb2c8ac5a3b10e47c56f017bac4057991d3815bcaa83770108e9921911"}]}, 0x1c4}], 0x2, &(0x7f0000004e80)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r0]}}], 0x48, 0xc001}, 0x4)
r1 = openat$ttyS3(0xffffff9c, 0x0, 0x131040, 0x0)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000300)=""/120)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r5}, 0x38)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000002040)={0x0, 0xfffffffffffffffb, 0x4a, 0x5, @scatter={0x8, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/104, 0x68}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/141, 0x8d}, {&(0x7f0000001cc0)=""/216, 0xd8}, {&(0x7f0000001dc0)=""/203, 0xcb}]}, &(0x7f0000001ec0)="b5db4bc918cd6496fe467e404baa0ae43ec0af6341e4212224a5003e1a6a10af6260d10da0a8467b9261736b238ef4daf08ff013d27e33ce89b86a604a9772d6f88f2894173b9dbb5d2e", &(0x7f0000001f40)=""/174, 0x8001, 0x1002f, 0x2, &(0x7f0000002000)})
r7 = dup(r6)
sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
mount(&(0x7f00000001c0)=@sr0, &(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000780)='gfs2\x00', 0x221000d, 0x0)

4m45.297895251s ago: executing program 2 (id=1684):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$radio(0x0, 0x3, 0x2)
socket$kcm(0x29, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$addseals(r2, 0x409, 0x8)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000100010002d0100000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff0000008030000"], 0x20}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="801400000421000041fda70e0000003b009f460372fae0cae5f66e14a3d6302747888aa1930451d348c184c110bf01c2d4ab8b2dbb1593b08e3d9934f8b06923c7501ecec693f3284209caac12"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, r6, 0x4, 0xfffffffe, 0x0, 0x2, 0x0, 0x1, 0x73})
pselect6(0x95, &(0x7f00000001c0)={0x3f, 0xffffffffffffff7e, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)

4m43.57284884s ago: executing program 2 (id=1686):
r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
chdir(&(0x7f0000000240)='./file0\x00')
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x40)
fadvise64(r7, 0xfff, 0x8, 0x2)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

4m42.904115377s ago: executing program 2 (id=1688):
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0", 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0)
connect(r2, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528)
sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x10000022, 0x151181)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x200})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)

4m42.150754929s ago: executing program 2 (id=1691):
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
r3 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x1)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={<r5=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r5, 0xb}}, 0x48)
close_range(r3, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fowner_gt}, {@subj_role={'subj_role', 0x3d, '{'}}, {@uid_eq}, {@measure}, {@measure}, {@euid_eq}]})
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = socket$key(0xf, 0x3, 0x2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r9=>r2, {0x4, 0xe0}}, './file1\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', <r10=>0x0, 0x29, 0x29, 0xf7, 0x40007ff, 0x64, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @local, 0x7800, 0x40, 0x3, 0x36c}})
setsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000480)={@multicast2, @loopback, r10}, 0xc)
sendmsg$key(r8, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0xa8}}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r7, 0x89f0, &(0x7f0000000000))

4m41.985153478s ago: executing program 33 (id=1691):
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
r3 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x1)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={<r5=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r5, 0xb}}, 0x48)
close_range(r3, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fowner_gt}, {@subj_role={'subj_role', 0x3d, '{'}}, {@uid_eq}, {@measure}, {@measure}, {@euid_eq}]})
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = socket$key(0xf, 0x3, 0x2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r9=>r2, {0x4, 0xe0}}, './file1\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', <r10=>0x0, 0x29, 0x29, 0xf7, 0x40007ff, 0x64, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @local, 0x7800, 0x40, 0x3, 0x36c}})
setsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000480)={@multicast2, @loopback, r10}, 0xc)
sendmsg$key(r8, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0xa8}}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r7, 0x89f0, &(0x7f0000000000))

1m4.255528224s ago: executing program 5 (id=2795):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x1, &(0x7f00000009c0)="16", 0x9, 0x1, 0x4c4a, 0x4155, 0x8b, 0x1, 0x9, 'syz0\x00'})

1m3.368620903s ago: executing program 5 (id=2800):
syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00')
socket$inet_sctp(0x2, 0x1, 0x84)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0), &(0x7f0000000080))
socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800183a000000000000aead60770000000000000100"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

1m2.110366515s ago: executing program 5 (id=2809):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000003c0)='GPL\x00'}, 0x9a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x10}, {0x0, 0xf}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x20, "8b7db52bbe8e52ea493401da35a13834"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)

1m1.978996401s ago: executing program 5 (id=2811):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x804048, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m1.877036501s ago: executing program 5 (id=2812):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x7f, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d47c0e5eef34204f04b000096440000000000000000008000", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)

1m1.470102239s ago: executing program 5 (id=2817):
syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00')
socket$inet_sctp(0x2, 0x1, 0x84)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0), &(0x7f0000000080))
socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800183a000000000000aead60770000000000000100"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

1m1.394750874s ago: executing program 34 (id=2817):
syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00')
socket$inet_sctp(0x2, 0x1, 0x84)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0), &(0x7f0000000080))
socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800183a000000000000aead60770000000000000100"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

3.098477638s ago: executing program 4 (id=3196):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffc, 0x8, 0x9, 0x100}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x0, 0x2}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000005c0)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e23, @broadcast}}]}, 0x10c)
unshare(0x8000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
semget$private(0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000040000200500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000000000000000005bf1f05d17c0fac30b7e8e14bc7e8a653e58d82e0381f0b00"/56], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.967622256s ago: executing program 1 (id=3197):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
listen(r0, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x120}, {0xffffffffffffffff, 0x120}], 0x2, &(0x7f0000000100), 0x0, 0x0)

2.830219927s ago: executing program 1 (id=3199):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffc, 0x8, 0x9, 0x100}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x0, 0x2}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000005c0)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}]}, 0x18c)
unshare(0x8000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
semget$private(0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000040000200500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000000000000000005bf1f05d17c0fac30b7e8e14bc7e8a653e58d82e0381f0b00"/56], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.829814813s ago: executing program 0 (id=3200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
write$tun(r2, 0x0, 0xfdef)

2.543971735s ago: executing program 0 (id=3201):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000100008000000000000000612eb401d19c950ee19900000005000000fbffffff0000001d3421b8d4a8620000"])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
close(0xffffffffffffffff)

1.990406949s ago: executing program 4 (id=3203):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x20)
ppoll(&(0x7f0000000040)=[{r0}, {r0, 0x8040}], 0x2, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000)

1.899872163s ago: executing program 1 (id=3204):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r2, r3, 0x4, r0}, 0x10)

1.830605139s ago: executing program 1 (id=3205):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
unshare(0x26020480)
setuid(0xee00)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)

1.710156699s ago: executing program 1 (id=3206):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffc, 0x8, 0x9, 0x100}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x0, 0x2}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000005c0)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}]}, 0x18c)
unshare(0x8000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
semget$private(0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000040000200500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000000000000000005bf1f05d17c0fac30b7e8e14bc7e8a653e58d82e0381f0b00"/56], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.683138259s ago: executing program 4 (id=3207):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0xfffe, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

1.237661264s ago: executing program 6 (id=3210):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14)

1.231768461s ago: executing program 4 (id=3211):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xbc4f63a844d325eb}}, 0x18)
sendmmsg(r0, &(0x7f000000a200), 0x3ffffffffffff31, 0x60000800)

1.118819012s ago: executing program 6 (id=3212):
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001240)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x4}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400d0}, 0x20008801)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00038008"], 0x34}}, 0x0)

1.118279233s ago: executing program 4 (id=3213):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffc, 0x8, 0x9, 0x100}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x0, 0x2}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000005c0)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e23, @broadcast}}]}, 0x10c)
unshare(0x8000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
semget$private(0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000040000200500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000000000000000005bf1f05d17c0fac30b7e8e14bc7e8a653e58d82e0381f0b00"/56], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.117842454s ago: executing program 6 (id=3214):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10140, 0x0)

1.020548592s ago: executing program 6 (id=3215):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffc, 0x8, 0x9, 0x100}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x0, 0x2}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000005c0)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}]}, 0x18c)
unshare(0x8000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
semget$private(0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000040000200500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000000000000000005bf1f05d17c0fac30b7e8e14bc7e8a653e58d82e0381f0b00"/56], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

559.853704ms ago: executing program 0 (id=3216):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x20)
ppoll(&(0x7f0000000040)=[{r0}, {r0, 0x8040}], 0x2, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000)

556.552688ms ago: executing program 1 (id=3217):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000005c0)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}]}, 0x18c)
unshare(0x8000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
semget$private(0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000040000200500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000000000000000005bf1f05d17c0fac30b7e8e14bc7e8a653e58d82e0381f0b00"/56], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

278.830511ms ago: executing program 0 (id=3218):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)

159.232205ms ago: executing program 4 (id=3219):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0xfffd, 0x1000}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0)

159.099201ms ago: executing program 0 (id=3220):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0xf6, r1, 0x1, 0xbd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14)

158.642904ms ago: executing program 6 (id=3221):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r1, r2, 0x25, 0x2, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @remote, @mcast2}}}}, 0x0)

412.769Β΅s ago: executing program 0 (id=3222):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\x02\x00\x00\x00G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\xafON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x19\xdd(5\xea0\x01,D\xf2\xa3\x85Q\x1f@\xdej\x88\xc8\x17\xc4<Y\xde\xf6v\x8f\x92\xd0XH\x12\x04\xf3\xd0-T\xcat\xf7\x85\xaa\x8fXT\xa1\xeb\xfd\xaf9\xca;\x85\x8b^\x8b\xa4\x89\xc7\x9c\x12\x91\xf9i\x02Q1D\xc2\xf5\x1c\x94\x1a\xcf\x80W\x84\x96,\x8fG\xacy?\xea$\xb2Ia\xce\x94\xf2Cm\x86\xb1qh8\xde\xe4\xe3\x80\xabM\xe9\x14|\xc1\xbb\xc14Dq\x1f\xf4\x88\xe7V\xe0\xa1Hb\xd94v&H\xd5j\x02~-\xed\r\xfc\xb4\r\x00\xe9\xe3\x92U\xe7\x8f\xcc\xe4HJ18R\xee\xc5\x85*\xcf\xcbh}&\xe2\xc5[\xbbY\xca\x17-\x04\x95\xa3\xc5(\x9c\xdaZ\x0f', 0x2)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x10, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x9]})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000340)={r0, 0xb, {0x0, 0x0, 0x0, 0x9, 0xa0e, 0x0, 0x2, 0x12, 0x10, "dd3f69943eebef80e9574e512a76b415b58af03d88444ad31a3f9ea01c259a99e160f54a91298688cd5460884d46cc0c76c95039b4b23f611de83a86b3f04b8e", "35d42d1c52961cb58491048d190b2ab895d5bdf57430812e4db320c0dab2f4aed97a139b2563926931afecea2b83507e1e3a6dd1d91063f5750b209457b99efe", "b7b0d261e620e7c5ce3dad114bf61645ea5edba56ed7aa2c47ef95aea141ada2", [0xfffffffffffffffe, 0x6f]}})

0s ago: executing program 6 (id=3223):
vmsplice(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000001800)="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", 0x802}], 0x1, 0xa)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0)

kernel console output (not intermixed with test programs):

: 100
[  963.792379][ T6572] usb 10-1: config 168 interface 0 has no altsetting 0
[  963.802429][ T6572] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  963.815206][ T6572] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  963.819570][ T6572] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  963.824113][ T6572] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  963.828665][ T6572] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  963.832479][ T6572] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  963.841882][ T6572] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  963.846687][ T6572] usb 10-1: config 168 interface 0 has no altsetting 0
[  963.857476][ T6572] usb 10-1: string descriptor 0 read error: -22
[  963.859618][ T6572] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  963.862744][ T6572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.882557][ T6572] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  964.319612][ T6009] usb 10-1: USB disconnect, device number 11
[  964.538616][T18104] adutux: No device or device unplugged -19
[  964.558690][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  964.562209][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  964.567487][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  964.569733][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  964.571983][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  964.575351][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  964.580675][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  964.729672][   T40] audit: type=1326 audit(964.589:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.4.2701" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d579 code=0x0
[  964.790568][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2701'.
[  965.099140][T18131] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  965.101924][T18131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  965.115213][T18131] vhci_hcd vhci_hcd.0: Device attached
[  965.345204][   T24] usb 39-1: new low-speed USB device number 24 using vhci_hcd
[  965.580694][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  965.585266][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  965.593620][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  965.596671][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  965.601454][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  965.607628][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  965.612727][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  965.635121][ T6028] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  965.704157][T18132] vhci_hcd: connection reset by peer
[  965.718936][   T98] vhci_hcd vhci_hcd.1: stop threads
[  965.721096][   T98] vhci_hcd vhci_hcd.1: release socket
[  965.736925][   T98] vhci_hcd vhci_hcd.1: disconnect device
[  965.805121][ T6028] usb 5-1: Using ep0 maxpacket: 16
[  965.814327][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  965.819662][ T6028] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  965.823019][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.826549][ T6028] usb 5-1: Product: syz
[  965.828042][ T6028] usb 5-1: Manufacturer: syz
[  965.829643][ T6028] usb 5-1: SerialNumber: syz
[  965.833982][ T6028] usb 5-1: config 0 descriptor??
[  965.838483][ T6028] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  965.841616][ T6028] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  966.106970][ T6028] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  966.174271][ T6028] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  966.179040][ T6028] em28xx 5-1:0.0: board has no eeprom
[  966.235264][ T6028] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  966.244421][ T6028] em28xx 5-1:0.0: dvb set to bulk mode.
[  966.274634][   T54] em28xx 5-1:0.0: Binding DVB extension
[  966.282752][ T6028] usb 5-1: USB disconnect, device number 20
[  966.307613][ T6028] em28xx 5-1:0.0: Disconnecting em28xx
[  966.345293][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  966.347726][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  966.358081][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  966.361545][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  966.364337][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  966.377361][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  966.382033][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  966.471957][   T54] em28xx 5-1:0.0: Registering input extension
[  966.476943][T18162] netlink: 'syz.5.2714': attribute type 1 has an invalid length.
[  966.485465][ T6028] em28xx 5-1:0.0: Closing input extension
[  966.521717][ T6028] em28xx 5-1:0.0: Freeing device
[  967.359766][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  967.362326][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  967.378688][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  967.381421][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  967.384360][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  967.415240][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  967.418422][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  967.495659][T18185] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  967.498122][T18185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  967.506343][T18185] vhci_hcd vhci_hcd.0: Device attached
[  967.745095][ T6572] usb 45-1: new low-speed USB device number 13 using vhci_hcd
[  967.959481][T18204] loop6: detected capacity change from 0 to 524287999
[  968.101847][T18186] vhci_hcd: connection reset by peer
[  968.105055][ T1194] vhci_hcd vhci_hcd.4: stop threads
[  968.107181][ T1194] vhci_hcd vhci_hcd.4: release socket
[  968.109159][ T1194] vhci_hcd vhci_hcd.4: disconnect device
[  968.700708][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  968.702873][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  968.706279][T18220] net_ratelimit: 3320 callbacks suppressed
[  968.706290][T18220] netlink: zone id is out of range
[  968.708927][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  968.714391][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  968.718875][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  968.723476][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  968.728650][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  968.776950][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  968.781523][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  968.786927][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  968.789893][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  968.821337][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  968.830455][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  968.834731][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  968.862906][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  968.865457][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  968.872097][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  968.874567][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  968.874593][T18231] netlink: 'syz.4.2739': attribute type 2 has an invalid length.
[  968.877615][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  968.883372][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  968.888897][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  968.908099][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  968.910113][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  968.915942][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  968.918327][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  968.920595][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  968.926073][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  968.930585][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  969.330703][T18254] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  969.332903][T18254] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  969.337807][T18254] vhci_hcd vhci_hcd.0: Device attached
[  969.575107][T13061] usb 47-1: new low-speed USB device number 13 using vhci_hcd
[  969.836379][T18255] vhci_hcd: connection reset by peer
[  969.838483][   T98] vhci_hcd vhci_hcd.5: stop threads
[  969.840233][   T98] vhci_hcd vhci_hcd.5: release socket
[  969.842210][   T98] vhci_hcd vhci_hcd.5: disconnect device
[  969.858116][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  969.860088][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  969.863375][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  969.865837][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  969.868179][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  969.871600][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  969.875663][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  969.918623][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  969.921374][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  969.931546][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  969.934511][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  969.945228][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  969.953614][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  969.957472][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  970.082302][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  970.084302][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  970.087858][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  970.098670][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  970.101215][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  970.104845][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  970.119302][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  970.298315][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  970.300652][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  970.303902][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  970.306878][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  970.309975][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  970.315353][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  970.319607][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  970.364460][T18278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.373862][T18278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.445045][   T62] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  970.515059][   T24] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  970.605027][   T62] usb 5-1: Using ep0 maxpacket: 8
[  970.609328][   T62] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  970.612140][   T62] usb 5-1: config 179 has no interface number 0
[  970.614421][   T62] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  970.618775][   T62] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  970.622512][   T62] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  970.626847][   T62] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  970.631077][   T62] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  970.635852][   T62] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  970.639822][   T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.647237][T18271] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  970.873162][   T62] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input23
[  970.916342][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  970.918477][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  970.921964][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  970.924311][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  970.927669][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  970.931118][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  970.931970][T18290] vcan0: tx drop: invalid da for name 0x0000000000000003
[  970.934597][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  971.009807][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  971.012096][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  971.015992][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  971.018328][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  971.020499][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  971.023940][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  971.027924][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  971.066119][ T6028] usb 5-1: USB disconnect, device number 21
[  971.066174][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  971.071836][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  971.415136][T18304] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  971.417973][T18304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  971.435076][T18304] vhci_hcd vhci_hcd.0: Device attached
[  971.684309][   T40] audit: type=1326 audit(971.549:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.5.2768" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc1579 code=0x0
[  971.725063][   T24] usb 39-1: new low-speed USB device number 25 using vhci_hcd
[  971.753769][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2768'.
[  971.758132][T18317] openvswitch: netlink: Flow actions attr not present in new flow.
[  972.028817][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  972.031374][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  972.038707][T18305] vhci_hcd: connection reset by peer
[  972.040021][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  972.043131][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  972.047397][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  972.050613][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  972.053667][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  972.086485][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  972.086771][ T1194] vhci_hcd vhci_hcd.1: stop threads
[  972.088717][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  972.090702][ T1194] vhci_hcd vhci_hcd.1: release socket
[  972.096014][ T1194] vhci_hcd vhci_hcd.1: disconnect device
[  972.096090][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  972.100989][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  972.103361][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  972.108701][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  972.112697][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  972.196339][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  972.198432][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  972.201870][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  972.204336][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  972.207476][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  972.210717][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  972.213705][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  972.347975][T18332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.351087][T18332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.878751][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  972.881557][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  972.886384][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  972.890266][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  972.896238][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  972.901401][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  972.917759][ T6572] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  972.929985][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  972.936974][T18352] bridge0: port 1(syz_tun) entered blocking state
[  972.939692][T18352] bridge0: port 1(syz_tun) entered disabled state
[  972.942319][T18352] syz_tun: entered allmulticast mode
[  972.968171][T18352] syz_tun: left allmulticast mode
[  973.504410][T18363] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  973.506775][T18363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  973.525364][T18363] vhci_hcd vhci_hcd.0: Device attached
[  973.561002][T18366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  973.563530][T18366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  973.581528][T18366] vhci_hcd vhci_hcd.0: Device attached
[  973.671040][   T40] audit: type=1804 audit(973.539:552): pid=18366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2784" name="/newroot/700/file0/file1" dev="overlay" ino=4623 res=1 errno=0
[  973.825492][T14560] usb 37-1: new low-speed USB device number 22 using vhci_hcd
[  973.828106][ T6572] usb 45-1: device descriptor read/64, error -110
[  974.025037][T18367] vhci_hcd: connection reset by peer
[  974.042457][ T1164] vhci_hcd vhci_hcd.0: stop threads
[  974.044727][ T1164] vhci_hcd vhci_hcd.0: release socket
[  974.047049][ T1164] vhci_hcd vhci_hcd.0: disconnect device
[  974.065169][ T6572] usb 45-1: new low-speed USB device number 14 using vhci_hcd
[  974.153840][T18364] vhci_hcd: connection reset by peer
[  974.165665][ T1194] vhci_hcd vhci_hcd.4: stop threads
[  974.167502][ T1194] vhci_hcd vhci_hcd.4: release socket
[  974.169557][ T1194] vhci_hcd vhci_hcd.4: disconnect device
[  974.655623][T13061] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  974.741381][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  974.743264][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  974.752670][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  974.755685][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  974.758064][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  974.761243][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  974.765419][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  975.205054][   T62] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  975.376754][   T62] usb 6-1: config 0 has no interfaces?
[  975.380415][   T62] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  975.383605][   T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.386630][   T62] usb 6-1: Product: syz
[  975.388011][   T62] usb 6-1: Manufacturer: syz
[  975.389580][   T62] usb 6-1: SerialNumber: syz
[  975.393177][   T62] usb 6-1: config 0 descriptor??
[  975.619761][   T62] usb 6-1: USB disconnect, device number 13
[  975.643902][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  975.646969][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  975.650504][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  975.652807][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  975.660151][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  975.663210][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  975.667404][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  975.689070][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.692251][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.699905][T18415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  975.704687][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.707052][T18415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  975.711668][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.714648][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.718414][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.721830][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.724557][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.728670][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.731584][ T6488] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  975.741944][ T6488] hid-generic 00A0:0006:0003.0002: hidraw1: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  975.863612][T18418] fido_id[18418]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  976.316893][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  976.325178][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  976.329571][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  976.331995][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  976.334672][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  976.339289][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  976.342893][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  976.611511][T18434] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  976.613990][T18434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  976.625795][T18434] vhci_hcd vhci_hcd.0: Device attached
[  976.825936][   T24] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  976.916139][T18442] overlayfs: upper fs needs to support d_type.
[  976.918481][T18442] overlayfs: upper fs does not support tmpfile.
[  976.929014][T18442] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  976.936871][T18442] overlayfs: failed to set xattr on upper
[  976.939029][T18442] overlayfs: ...falling back to redirect_dir=nofollow.
[  976.941672][T18442] overlayfs: ...falling back to index=off.
[  976.943918][T18442] overlayfs: ...falling back to uuid=null.
[  977.175940][T18435] vhci_hcd: connection closed
[  977.176332][   T12] vhci_hcd vhci_hcd.4: stop threads
[  977.180687][   T12] vhci_hcd vhci_hcd.4: release socket
[  977.183045][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  977.590926][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  977.596809][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  977.602028][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  977.609010][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  977.613379][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  977.687784][T18458] lo speed is unknown, defaulting to 1000
[  977.690340][T18458] geneve1 speed is unknown, defaulting to 1000
[  977.772257][T18458] lo speed is unknown, defaulting to 1000
[  977.898291][T18458] chnl_net:caif_netlink_parms(): no params data found
[  977.945351][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  977.947830][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  977.957128][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  977.959342][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  977.961734][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  977.984143][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  977.989406][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  977.996019][T18458] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.999801][T18458] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.002258][T18458] bridge_slave_0: entered allmulticast mode
[  978.005531][T18458] bridge_slave_0: entered promiscuous mode
[  978.010624][T18458] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.013353][T18458] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.015886][T18458] bridge_slave_1: entered allmulticast mode
[  978.018692][T18458] bridge_slave_1: entered promiscuous mode
[  978.057440][T18458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.061862][T18458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.094396][T18458] team0: Port device team_slave_0 added
[  978.097837][T18458] team0: Port device team_slave_1 added
[  978.103075][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  978.105453][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  978.108677][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  978.111002][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  978.113040][T18458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.113197][ T5351] loop4: p4 size 327680 extends beyond EOD, 
[  978.115388][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.115409][T18458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.128029][T18458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.131918][ T5351] truncated
[  978.134509][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.136195][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  978.144207][T18458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  978.149549][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  978.179805][T18458] hsr_slave_0: entered promiscuous mode
[  978.182525][T18458] hsr_slave_1: entered promiscuous mode
[  978.185098][T18458] debugfs: 'hsr0' already exists in 'hsr'
[  978.187211][T18458] Cannot create hsr debugfs directory
[  978.283145][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  978.285453][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  978.289828][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  978.295210][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  978.297539][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  978.301211][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  978.304542][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  978.378926][T18458] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  978.397654][T18458] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  978.402826][T18458] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  978.420518][T18458] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  978.438938][T18458] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.441565][T18458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  978.444511][T18458] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.446983][T18458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  978.484728][T18458] 8021q: adding VLAN 0 to HW filter on device bond0
[  978.552541][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.556757][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.571242][T18458] 8021q: adding VLAN 0 to HW filter on device team0
[  978.579994][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.583263][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  978.607918][T18458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  978.611985][T18458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  978.642508][T11687] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.645807][T11687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  978.837342][T18458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  978.975148][T14560] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  978.994060][T18458] veth0_vlan: entered promiscuous mode
[  979.002143][T18458] veth1_vlan: entered promiscuous mode
[  979.023473][T18458] veth0_macvtap: entered promiscuous mode
[  979.029174][T18458] veth1_macvtap: entered promiscuous mode
[  979.039594][T18458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  979.047218][T18458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  979.053880][ T1194] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  979.057406][ T1194] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  979.061835][ T1194] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  979.067429][ T1194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  979.128164][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.136241][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  979.162627][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.166706][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  979.215009][ T6572] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  979.282130][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  979.284159][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  979.288696][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  979.291133][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  979.293499][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  979.298838][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  979.302296][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  979.440770][T18518] erspan0: entered promiscuous mode
[  979.525319][ T6704] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  979.678242][ T6704] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 47, changing to 4
[  979.683289][ T6704] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 42203, setting to 1023
[  979.694255][ T6704] usb 5-1: config 0 interface 0 has no altsetting 0
[  979.705692][T14431] Bluetooth: hci3: command tx timeout
[  979.714432][ T6704] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  979.719849][ T6704] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  979.724425][ T6704] usb 5-1: Product: syz
[  979.730382][ T6704] usb 5-1: Manufacturer: syz
[  979.734056][ T6704] usb 5-1: SerialNumber: syz
[  979.738119][ T6704] usb 5-1: config 0 descriptor??
[  979.743236][ T6704] usb 5-1: selecting invalid altsetting 0
[  980.003582][T18510] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  980.013897][   T24] usb 5-1: USB disconnect, device number 22
[  980.196022][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  980.199877][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  980.204652][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  980.207095][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  980.209649][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  980.212636][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  980.216098][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  980.269802][T18526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  980.272780][T18526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  980.675094][   T62] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  980.836021][   T62] usb 6-1: Using ep0 maxpacket: 16
[  980.847819][   T62] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.851224][   T62] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  980.854505][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.870482][   T62] usb 6-1: config 0 descriptor??
[  980.884164][   T62] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input24
[  980.887382][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  980.889447][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  980.906315][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  980.910725][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  980.914776][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  980.920675][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  980.925881][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  981.352728][   T62] bcm5974 6-1:0.0: could not read from device
[  981.368420][ T5336] bcm5974 6-1:0.0: could not read from device
[  981.373821][   T62] input: failed to attach handler mousedev to device input24, error: -5
[  981.386391][   T62] usb 6-1: USB disconnect, device number 14
[  981.388625][ T5336] bcm5974 6-1:0.0: could not read from device
[  981.392600][ T5336] bcm5974 6-1:0.0: could not read from device
[  981.527889][   T40] audit: type=1326 audit(981.399:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.6.2838" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0
[  981.630893][T18553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2838'.
[  981.634154][T18553] openvswitch: netlink: Flow actions attr not present in new flow.
[  981.756456][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  981.765311][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  981.770569][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  981.773643][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  981.779702][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  981.784715][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  981.787528][T14431] Bluetooth: hci3: command tx timeout
[  981.793896][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  982.730336][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  982.732243][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  982.740010][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  982.742472][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  982.746328][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  982.749489][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  982.752625][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  982.775077][ T6488] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  982.936979][ T6488] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  982.940230][ T6488] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  982.943119][ T6488] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  982.949812][ T6488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.957301][ T6488] usb 5-1: config 0 descriptor??
[  982.970025][ T6488] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  982.977607][ T6488] dvb-usb: bulk message failed: -22 (3/0)
[  982.990144][ T6488] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  983.003168][ T6488] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  983.009054][ T6488] usb 5-1: media controller created
[  983.013172][ T6488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  983.020960][ T6488] dvb-usb: bulk message failed: -22 (6/0)
[  983.022845][ T6488] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  983.027074][ T6488] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input25
[  983.032527][ T6488] dvb-usb: schedule remote query interval to 150 msecs.
[  983.039808][ T6488] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  983.195151][ T6488] dvb-usb: bulk message failed: -22 (1/0)
[  983.197170][ T6488] dvb-usb: error while querying for an remote control event.
[  983.246824][T13061] usb 5-1: USB disconnect, device number 23
[  983.269868][T13061] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  983.460002][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2849'.
[  983.668116][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  983.670597][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  983.674007][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  983.676514][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  983.678978][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  983.682110][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  983.685344][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  983.755146][T13061] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  983.865060][T14431] Bluetooth: hci3: command tx timeout
[  983.937276][T13061] usb 11-1: config index 0 descriptor too short (expected 39, got 27)
[  983.943113][T13061] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  983.948666][T13061] usb 11-1: config 0 interface 0 has no altsetting 0
[  983.958581][T13061] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  983.964440][T13061] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  983.969604][T13061] usb 11-1: Product: syz
[  983.972256][T13061] usb 11-1: Manufacturer: syz
[  983.974801][T13061] usb 11-1: SerialNumber: syz
[  983.980781][T13061] usb 11-1: config 0 descriptor??
[  983.986111][T13061] hub 11-1:0.0: bad descriptor, ignoring hub
[  983.988964][T13061] hub 11-1:0.0: probe with driver hub failed with error -5
[  983.998010][T13061] usb 11-1: selecting invalid altsetting 0
[  984.026324][ T6488] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  984.182835][ T6488] usb 5-1: Using ep0 maxpacket: 16
[  984.204365][ T6488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  984.208770][ T6488] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  984.213020][ T6488] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  984.223546][ T6488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.229343][ T6488] usb 5-1: config 0 descriptor??
[  984.597474][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  984.600071][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  984.615275][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  984.618053][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  984.620225][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  984.623477][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  984.626788][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  984.772124][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  984.774253][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  984.777677][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  984.780164][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  984.782562][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  984.785714][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  984.789328][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  984.865265][ T6488] usbhid 5-1:0.0: can't add hid device: -71
[  984.869897][ T6488] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  984.877316][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  984.877317][ T6488] usb 5-1: USB disconnect, device number 24
[  984.881780][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  984.885662][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  984.887743][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  984.889819][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  984.892968][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  984.896745][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  984.912972][T18589] usb 11-1: reset high-speed USB device number 2 using dummy_hcd
[  985.034389][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  985.036425][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  985.039754][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  985.041913][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  985.044041][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  985.056058][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  985.059835][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  985.083475][T18589] usb 11-1: device firmware changed
[  985.089018][T13061] usb 11-1: USB disconnect, device number 2
[  985.245037][T13061] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  985.407529][T13061] usb 11-1: config index 0 descriptor too short (expected 39, got 27)
[  985.411055][T13061] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  985.415109][T13061] usb 11-1: config 0 interface 0 has no altsetting 0
[  985.421151][T13061] usb 11-1: language id specifier not provided by device, defaulting to English
[  985.430803][T13061] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  985.434087][T13061] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  985.437807][T13061] usb 11-1: Product: syz
[  985.445038][T13061] usb 11-1: config 0 descriptor??
[  985.449059][T13061] hub 11-1:0.0: bad descriptor, ignoring hub
[  985.451896][T13061] hub 11-1:0.0: probe with driver hub failed with error -5
[  985.458478][T13061] usb 11-1: selecting invalid altsetting 0
[  985.789022][ T6031] usb 11-1: USB disconnect, device number 3
[  985.927302][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  985.930980][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  985.934747][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  985.937913][T18631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  985.940962][T18631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  985.941734][ T5351] loop4: p3 start 4294836224 is beyond EOD, 
[  985.945377][T14431] Bluetooth: hci3: command tx timeout
[  985.945391][ T5351] truncated
[  985.945403][ T5351] loop4: p4 size 327680 extends beyond EOD, 
[  985.948500][T18631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  985.952957][ T5351] truncated
[  985.954119][T18631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  985.962496][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  985.972848][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  986.328180][T13061] hid-generic 0005:0C45:FFF9.0003: item fetching failed at offset 0/1
[  986.335265][T13061] hid-generic 0005:0C45:FFF9.0003: probe with driver hid-generic failed with error -22
[  986.376657][   T40] audit: type=1326 audit(986.249:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.6.2864" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0
[  986.467962][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2864'.
[  986.485023][T18643] openvswitch: netlink: Flow actions attr not present in new flow.
[  986.505924][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  986.514002][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  986.519710][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  986.526017][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  986.528915][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  986.532516][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  986.540970][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  986.665227][ T6028] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  986.696446][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  986.699070][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  986.704394][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  986.713405][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  986.717121][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  986.729806][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  986.737530][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  986.752048][T18654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  986.755453][T18654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.815013][ T6028] usb 6-1: Using ep0 maxpacket: 32
[  986.819165][ T6028] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  986.822924][ T6028] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  986.830729][ T6028] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  986.837182][ T6028] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024
[  986.841046][ T6028] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  986.846325][ T6028] usb 6-1: config 0 interface 0 has no altsetting 0
[  986.850486][ T6028] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  986.853708][ T6028] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  986.857549][ T6028] usb 6-1: Product: syz
[  986.859138][ T6028] usb 6-1: Manufacturer: syz
[  986.860780][ T6028] usb 6-1: SerialNumber: syz
[  986.863836][ T6028] usb 6-1: config 0 descriptor??
[  986.866633][T18645] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  986.870558][ T6028] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  986.874720][ T6028] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  987.258099][ T6028] usb 6-1: USB disconnect, device number 15
[  987.262466][ T6028] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  987.307897][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  987.310521][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  987.314834][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  987.318511][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  987.321640][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  987.328275][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  987.332810][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  987.405300][ T6031] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  987.422581][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  987.425296][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  987.429691][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  987.432627][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  987.436678][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  987.440533][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  987.444649][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  987.555128][ T6031] usb 11-1: Using ep0 maxpacket: 8
[  987.559274][ T6031] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  987.563010][ T6031] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.576134][ T6031] pvrusb2: Hardware description: Terratec Grabster AV400
[  987.579819][ T6031] pvrusb2: **********
[  987.581556][ T6031] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  987.585911][ T6031] pvrusb2: Important functionality might not be entirely working.
[  987.588908][ T6031] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  987.593272][ T6031] pvrusb2: **********
[  987.782139][ T2488] pvrusb2: Invalid write control endpoint
[  987.847108][ T2488] pvrusb2: Invalid write control endpoint
[  987.849283][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  987.855932][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  987.858393][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  987.861790][ T2488] pvrusb2: Device being rendered inoperable
[  987.864229][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  987.868422][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  987.876618][ T2488] pvrusb2: Attached sub-driver cx25840
[  987.878696][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  987.882305][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  987.976199][T18657] pvrusb2: Attempted to execute control transfer when device not ok
[  987.982333][ T6028] usb 11-1: USB disconnect, device number 4
[  988.085215][ T6488] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  988.245398][ T6488] usb 6-1: Using ep0 maxpacket: 8
[  988.248516][ T6488] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  988.251325][ T6488] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  988.254643][ T6488] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  988.258337][ T6488] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  988.268952][ T6488] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  988.273490][ T6488] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  988.284442][ T6488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.340910][   T40] audit: type=1326 audit(988.209:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.2880" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0
[  988.343570][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  988.350273][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  988.353359][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  988.356299][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  988.358893][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  988.362120][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  988.366589][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  988.426476][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'.
[  988.430184][T18685] openvswitch: netlink: Flow actions attr not present in new flow.
[  988.532882][ T6488] usb 6-1: GET_CAPABILITIES returned 0
[  988.537939][ T6488] usbtmc 6-1:16.0: can't read capabilities
[  988.842037][T13061] usb 6-1: USB disconnect, device number 16
[  989.288530][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  989.291365][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  989.301381][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  989.303490][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  989.306139][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  989.310398][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  989.314759][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  989.444000][T18703] lo speed is unknown, defaulting to 1000
[  989.448222][T18703] geneve1 speed is unknown, defaulting to 1000
[  989.485657][   T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  989.540360][T18703] lo speed is unknown, defaulting to 1000
[  989.623932][T18711] random: crng reseeded on system resumption
[  989.669667][   T24] usb 5-1: Using ep0 maxpacket: 8
[  989.684488][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  989.688265][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  989.692531][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  989.696778][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  989.701363][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  989.704416][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.914715][   T24] usb 5-1: GET_CAPABILITIES returned 0
[  989.916947][   T24] usbtmc 5-1:16.0: can't read capabilities
[  990.118003][T13061] usb 5-1: USB disconnect, device number 25
[  990.184142][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  990.186315][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  990.189304][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  990.191685][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  990.194026][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  990.205720][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  990.208844][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  991.216310][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  991.218215][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  991.221915][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  991.224322][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  991.230142][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  991.234339][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  991.239130][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  991.256802][T13061] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  991.283745][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  991.285977][T18739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  991.287533][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  991.289063][T18739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  991.293007][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  991.297295][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  991.300830][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  991.305904][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  991.309943][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  991.465952][T13061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64
[  991.475115][ T6488] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  991.476231][T13061] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  991.481191][T13061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.483736][T13061] usb 6-1: Product: syz
[  991.495017][T13061] usb 6-1: Manufacturer: syz
[  991.496888][T13061] usb 6-1: SerialNumber: syz
[  991.499817][T13061] usb 6-1: config 0 descriptor??
[  991.625662][ T6488] usb 11-1: too many configurations: 9, using maximum allowed: 8
[  991.629393][ T6488] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  991.632318][ T6488] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  991.635916][ T6488] usb 11-1: config 0 interface 0 has no altsetting 0
[  991.638946][ T6488] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  991.641957][ T6488] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  991.645846][ T6488] usb 11-1: config 0 interface 0 has no altsetting 0
[  991.649146][ T6488] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  991.652004][ T6488] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  991.655730][ T6488] usb 11-1: config 0 interface 0 has no altsetting 0
[  991.659680][ T6488] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  991.664276][ T6488] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  991.669517][ T6488] usb 11-1: config 0 interface 0 has no altsetting 0
[  991.673754][ T6488] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  991.677581][ T6488] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  991.681527][ T6488] usb 11-1: config 0 interface 0 has no altsetting 0
[  991.685631][ T6488] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  991.688648][ T6488] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  991.692202][ T6488] usb 11-1: config 0 interface 0 has no altsetting 0
[  991.695242][ T6488] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  991.698125][ T6488] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  991.702034][ T6488] usb 11-1: config 0 interface 0 has no altsetting 0
[  991.706430][ T6488] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9
[  991.709374][ T6488] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  991.713088][ T6488] usb 11-1: config 0 interface 0 has no altsetting 0
[  991.717334][ T6488] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  991.720742][ T6488] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  991.723936][ T6488] usb 11-1: Product: syz
[  991.725817][ T6488] usb 11-1: Manufacturer: syz
[  991.727460][ T6488] usb 11-1: SerialNumber: syz
[  991.730654][ T6488] usb 11-1: config 0 descriptor??
[  991.739444][ T6488] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0
[  991.901450][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  991.903999][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  991.909114][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  991.912363][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  991.915402][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  991.919650][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  991.923926][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  991.930804][T13061] usb 6-1: USB disconnect, device number 17
[  992.007801][    C3] usb 11-1: yurex_control_callback - control failed: -71
[  992.007905][ T6572] usb 11-1: USB disconnect, device number 5
[  992.015460][ T6572] yurex 11-1:0.0: USB YUREX #0 now disconnected
[  992.077263][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  992.080477][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  992.094161][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  992.096771][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  992.099479][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  992.102643][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  992.108128][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  992.799780][T18766] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  992.801992][T18766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  992.807455][T18766] vhci_hcd vhci_hcd.0: Device attached
[  993.107562][T18776] syz.6.2906: attempt to access beyond end of device
[  993.107562][T18776] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[  993.111941][T18776] gfs2: error -5 reading superblock
[  993.804331][T18767] vhci_hcd: connection closed
[  993.804566][   T12] vhci_hcd vhci_hcd.1: stop threads
[  993.812360][   T12] vhci_hcd vhci_hcd.1: release socket
[  993.814597][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  993.926772][   T24] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  994.308419][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  994.310731][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  994.314158][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  994.317500][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  994.320335][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  994.323838][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  994.327506][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  994.541795][   T40] audit: type=1326 audit(994.409:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.0.2908" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0
[  994.612131][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'.
[  994.615119][T18785] openvswitch: netlink: Flow actions attr not present in new flow.
[  994.835025][   T62] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  995.006577][   T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  995.010212][   T62] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  995.013034][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.017646][   T62] usb 6-1: config 0 descriptor??
[  995.236168][   T62] usbhid 6-1:0.0: can't add hid device: -71
[  995.238833][   T62] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  995.242937][   T62] usb 6-1: USB disconnect, device number 18
[  995.246924][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  995.249012][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  995.252690][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  995.255759][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  995.258129][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  995.260919][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  995.269736][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  995.435130][ T8102] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  995.608793][ T8102] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  995.613743][ T8102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  995.616913][ T8102] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  995.620497][ T8102] usb 5-1: config 0 interface 0 has no altsetting 0
[  995.624261][ T8102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  995.627652][ T8102] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  995.631540][ T8102] usb 5-1: config 0 interface 0 has no altsetting 0
[  995.635282][ T8102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  995.638709][ T8102] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  995.642073][ T8102] usb 5-1: config 0 interface 0 has no altsetting 0
[  995.646168][ T8102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  995.650025][ T8102] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  995.653749][ T8102] usb 5-1: config 0 interface 0 has no altsetting 0
[  995.663564][ T8102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  995.666382][T18810] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  995.668871][T18810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  995.671285][   T62] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  995.674306][T18810] vhci_hcd vhci_hcd.0: Device attached
[  995.676514][ T8102] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  995.694800][ T8102] usb 5-1: config 0 interface 0 has no altsetting 0
[  995.702509][ T8102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  995.705636][ T8102] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  995.709398][ T8102] usb 5-1: config 0 interface 0 has no altsetting 0
[  995.713633][ T8102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  995.717297][ T8102] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  995.721192][ T8102] usb 5-1: config 0 interface 0 has no altsetting 0
[  995.725056][ T8102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  995.728643][ T8102] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  995.732532][ T8102] usb 5-1: config 0 interface 0 has no altsetting 0
[  995.738237][ T8102] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  995.741287][ T8102] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  995.744000][ T8102] usb 5-1: Product: syz
[  995.745929][ T8102] usb 5-1: Manufacturer: syz
[  995.747684][ T8102] usb 5-1: SerialNumber: syz
[  995.752375][ T8102] usb 5-1: config 0 descriptor??
[  995.775071][ T8102] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  995.835126][   T62] usb 6-1: Using ep0 maxpacket: 32
[  995.846431][   T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  995.851316][   T62] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  995.856025][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.869471][   T62] usb 6-1: config 0 descriptor??
[  995.887521][   T62] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  995.924982][   T24] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[  995.929672][   T62] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  996.030077][    C1] usb 5-1: yurex_control_callback - control failed: -71
[  996.031178][ T6488] usb 5-1: USB disconnect, device number 26
[  996.038574][ T6488] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  996.075752][ T6572] usb 6-1: USB disconnect, device number 19
[  996.080551][ T6572] ldusb 6-1:0.0: LD USB Device #1 now disconnected
[  996.179778][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  996.182505][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  996.187569][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  996.190582][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  996.193704][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  996.199076][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  996.203047][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  996.324481][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  996.326396][T18811] vhci_hcd: connection reset by peer
[  996.328563][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  996.331863][ T1258] vhci_hcd vhci_hcd.6: stop threads
[  996.332055][ T5351] loop4: p2 start 4294901760 is beyond EOD, 
[  996.333572][ T1258] vhci_hcd vhci_hcd.6: release socket
[  996.333651][ T1258] vhci_hcd vhci_hcd.6: disconnect device
[  996.336403][ T5351] truncated
[  996.342111][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  996.344838][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  996.351669][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  996.355725][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  996.522093][T18821] syz.4.2920: attempt to access beyond end of device
[  996.522093][T18821] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[  996.527639][T18821] gfs2: error -5 reading superblock
[  997.270231][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2924'.
[  997.355054][ T6488] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  997.392586][   T40] audit: type=1326 audit(997.259:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.6.2925" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0
[  997.453113][T18838] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  997.505084][ T6488] usb 6-1: Using ep0 maxpacket: 8
[  997.508640][ T6488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  997.512784][ T6488] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  997.515970][ T6488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.520786][ T6488] usb 6-1: config 0 descriptor??
[  997.707761][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  997.743845][ T6488] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  997.811241][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  997.813726][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  997.818769][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  997.822162][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  997.825098][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  997.829682][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  997.833633][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  997.978626][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  997.980800][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  997.984300][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  997.987035][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  997.989277][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  997.992384][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  997.995410][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  998.150087][ T6488] usb 6-1: USB disconnect, device number 20
[  998.172368][T18852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2930'.
[  998.901425][T18859] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  998.903857][T18859] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  998.907361][T18859] vhci_hcd vhci_hcd.0: Device attached
[  998.915190][ T6488] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  998.934733][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  998.936829][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  998.940168][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  998.942526][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  998.944841][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  998.948787][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  998.952721][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  999.045788][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  999.047699][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  999.051463][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  999.054095][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  999.057996][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  999.061544][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  999.065277][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  999.075754][ T6488] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  999.080303][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  999.083472][ T6488] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  999.095810][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0
[  999.099118][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  999.102215][ T6488] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  999.114351][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0
[  999.118357][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  999.121297][ T6488] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  999.130173][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0
[  999.136133][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  999.139026][ T6488] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  999.142719][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0
[  999.146091][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  999.149253][ T6488] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  999.153014][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0
[  999.156226][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  999.159397][ T6488] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  999.163143][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0
[  999.166540][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  999.169744][ T6488] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  999.174277][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0
[  999.178066][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  999.181206][ T6488] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  999.185860][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0
[  999.191013][ T6488] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  999.191427][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  999.193935][ T6488] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  999.193952][ T6488] usb 6-1: Product: syz
[  999.193960][ T6488] usb 6-1: Manufacturer: syz
[  999.193968][ T6488] usb 6-1: SerialNumber: syz
[  999.195677][ T6488] usb 6-1: config 0 descriptor??
[  999.205106][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  999.210418][ T6488] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  999.280784][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[  999.284040][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  999.288331][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[  999.292946][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  999.299256][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  999.567172][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[  999.569179][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[  999.580015][    C3] usb 6-1: yurex_control_callback - control failed: -71
[  999.583806][ T6488] usb 6-1: USB disconnect, device number 21
[  999.583966][ T5351] loop4: p2 start 4294901760 is beyond EOD, 
[  999.587946][ T6488] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  999.593774][ T5351] truncated
[  999.596155][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[  999.596462][T18860] vhci_hcd: connection closed
[  999.599297][ T1194] vhci_hcd vhci_hcd.6: stop threads
[  999.602903][ T1194] vhci_hcd vhci_hcd.6: release socket
[  999.603603][ T5351] loop4: p4 size 327680 extends beyond EOD, 
[  999.606276][ T1194] vhci_hcd vhci_hcd.6: disconnect device
[  999.610663][ T5351] truncated
[  999.636648][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[  999.640897][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[  999.840640][   T40] audit: type=1326 audit(999.709:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18877 comm="syz.4.2939" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d579 code=0x0
[  999.901351][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2939'.
[  999.904633][T18881] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1000.702261][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1000.704597][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1000.717872][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1000.724734][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1000.735192][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1000.739671][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1000.743969][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1001.055070][   T24] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1001.235242][   T62] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[ 1001.387409][   T62] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[ 1001.390458][   T62] usb 5-1: config 0 has no interface number 0
[ 1001.392509][   T62] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1001.397779][   T62] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1001.402277][   T62] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1001.408217][   T62] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1001.411594][   T62] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1001.414435][   T62] usb 5-1: Product: syz
[ 1001.416137][   T62] usb 5-1: SerialNumber: syz
[ 1001.421503][   T62] usb 5-1: config 0 descriptor??
[ 1001.432387][   T62] cm109 5-1:0.8: invalid payload size 0, expected 4
[ 1001.442605][   T62] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input27
[ 1001.465167][ T6028] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[ 1001.655846][ T6028] usb 11-1: too many configurations: 9, using maximum allowed: 8
[ 1001.660298][ T6028] usb 11-1: config 0 has no interfaces?
[ 1001.663288][ T6028] usb 11-1: config 0 has no interfaces?
[ 1001.666447][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1001.677776][ T6028] usb 11-1: config 0 has no interfaces?
[ 1001.683424][ T6028] usb 11-1: config 0 has no interfaces?
[ 1001.687477][ T6028] usb 11-1: config 0 has no interfaces?
[ 1001.690616][ T6028] usb 11-1: config 0 has no interfaces?
[ 1001.694545][ T6028] usb 11-1: config 0 has no interfaces?
[ 1001.698423][ T6028] usb 11-1: config 0 has no interfaces?
[ 1001.704230][ T6028] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1001.712844][ T6028] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1001.715515][ T6028] usb 11-1: Product: syz
[ 1001.717661][ T6028] usb 11-1: Manufacturer: syz
[ 1001.720305][ T6028] usb 11-1: SerialNumber: syz
[ 1001.723722][ T6028] usb 11-1: config 0 descriptor??
[ 1001.776971][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1001.780485][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1001.789199][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1001.793093][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1001.799659][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1001.803939][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1001.808412][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1001.926993][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1001.931624][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1001.934163][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1001.936612][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1001.938935][   T62] usb 5-1: USB disconnect, device number 27
[ 1001.940848][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1001.940863][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1001.951303][   T62] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1002.182245][T18905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1002.186324][T18905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1002.218386][   T62] usb 11-1: USB disconnect, device number 6
[ 1002.499483][   T40] audit: type=1326 audit(1002.369:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.1.2951" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffd579 code=0x0
[ 1002.562289][T18925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2951'.
[ 1002.566563][T18925] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1002.678066][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1002.680752][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1002.685280][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1002.688198][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1002.691552][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1002.696033][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1002.700366][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1003.016161][T18936] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[ 1003.019177][T18936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1003.024151][T18936] vhci_hcd vhci_hcd.0: Device attached
[ 1003.101851][   T40] audit: type=1804 audit(1002.969:560): pid=18936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2954" name="/newroot/501/file0/file1" dev="overlay" ino=3638 res=1 errno=0
[ 1003.275316][   T62] usb 45-1: new low-speed USB device number 15 using vhci_hcd
[ 1003.546003][T18937] vhci_hcd: connection reset by peer
[ 1003.548429][ T1146] vhci_hcd vhci_hcd.4: stop threads
[ 1003.550175][ T1146] vhci_hcd vhci_hcd.4: release socket
[ 1003.552288][ T1146] vhci_hcd vhci_hcd.4: disconnect device
[ 1003.886052][   T40] audit: type=1326 audit(1003.749:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18962 comm="syz.0.2964" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0
[ 1003.946649][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2964'.
[ 1003.949827][T18971] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1004.152705][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1004.158070][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1004.166871][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1004.171658][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1004.177148][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1004.183218][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1004.189680][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1005.232487][T18998] syz.6.2973: attempt to access beyond end of device
[ 1005.232487][T18998] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[ 1005.237329][T18998] gfs2: error -5 reading superblock
[ 1005.305053][ T6572] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1005.465058][ T6572] usb 6-1: Using ep0 maxpacket: 8
[ 1005.470001][ T6572] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1005.475557][ T6572] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1005.480331][ T6572] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1005.485495][ T6572] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1005.491375][ T6572] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1005.495919][ T6572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.725045][ T6572] usb 6-1: GET_CAPABILITIES returned 0
[ 1005.727898][ T6572] usbtmc 6-1:16.0: can't read capabilities
[ 1005.933333][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1005.937459][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1005.942350][T18996] usbtmc 6-1:16.0: Unable to send data, error -71
[ 1005.946633][ T6572] usb 6-1: USB disconnect, device number 22
[ 1006.187628][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1006.190433][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1006.197932][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1006.201242][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1006.204353][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1006.216665][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1006.221513][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1006.256596][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'.
[ 1006.905098][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1006.907949][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1006.926628][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1006.929624][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1006.932646][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1006.938007][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1006.945573][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1007.084440][T19030] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2987'.
[ 1007.392092][T19036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1007.395184][T19036] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1007.400894][T19036] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1007.403759][T19036] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1007.419049][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1007.422718][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1007.431750][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1007.445834][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1007.455443][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1007.476363][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1007.485627][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1007.553169][ T1146] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1008.080305][T19055] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[ 1008.082876][T19055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1008.091827][T19055] vhci_hcd vhci_hcd.0: Device attached
[ 1008.153445][T19059] syz.1.2995: attempt to access beyond end of device
[ 1008.153445][T19059] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[ 1008.158051][T19059] gfs2: error -5 reading superblock
[ 1008.335008][   T24] usb 37-1: new low-speed USB device number 23 using vhci_hcd
[ 1008.415015][   T62] vhci_hcd vhci_hcd.4: vhci_device speed not set
[ 1008.711787][T19056] vhci_hcd: connection reset by peer
[ 1008.714423][ T1146] vhci_hcd vhci_hcd.0: stop threads
[ 1008.716843][ T1146] vhci_hcd vhci_hcd.0: release socket
[ 1008.719019][ T1146] vhci_hcd vhci_hcd.0: disconnect device
[ 1009.375705][T19067] Set syz1 is full, maxelem 13056 reached
[ 1009.473846][   T40] audit: type=1326 audit(1009.339:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.0.2998" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0
[ 1009.542540][T19079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'.
[ 1009.546690][T19079] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1009.625201][ T5953] Bluetooth: hci4: command 0x1003 tx timeout
[ 1009.626101][T14431] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1009.685283][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1009.687321][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1009.690463][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1009.692648][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1009.694852][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1009.717174][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1009.723897][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1010.285896][ T6488] usb 11-1: new low-speed USB device number 7 using dummy_hcd
[ 1010.436544][ T6488] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1010.440428][ T6488] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1010.443524][ T6488] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1010.447740][ T6488] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1010.450786][ T6488] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.458952][T19097] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1010.462530][ T6488] hub 11-1:1.0: bad descriptor, ignoring hub
[ 1010.465381][ T6488] hub 11-1:1.0: probe with driver hub failed with error -5
[ 1010.468599][ T6488] cdc_wdm 11-1:1.0: skipping garbage
[ 1010.470554][ T6488] cdc_wdm 11-1:1.0: skipping garbage
[ 1010.473591][ T6488] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[ 1010.475668][ T6488] cdc_wdm 11-1:1.0: Unknown control protocol
[ 1010.796942][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1010.802943][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1010.817929][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1010.821166][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1010.824204][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1010.831101][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1010.836018][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1010.930070][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1010.932864][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1010.942318][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1010.945539][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1010.948979][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1010.953506][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1010.959062][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1010.993264][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1010.995916][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1011.000445][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1011.002734][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1011.009192][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1011.012799][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1011.016312][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1011.226458][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1011.228417][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1011.232021][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1011.234753][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1011.237666][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1011.240747][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1011.251699][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1011.406838][T19131] program syz.0.3018 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1012.007123][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'.
[ 1012.245078][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1012.247787][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1012.252153][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1012.254668][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1012.257674][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1012.261214][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1012.264439][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1013.163953][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1013.166292][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1013.170404][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1013.172732][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1013.186220][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1013.190364][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1013.194500][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1013.223242][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1013.226064][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1013.230681][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1013.233740][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1013.237850][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1013.242313][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1013.247136][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1013.284604][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1013.287076][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1013.290113][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1013.292508][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1013.295170][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1013.299791][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1013.303897][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1013.455101][   T24] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1014.117544][T19096] cdc_wdm 11-1:1.0: Error autopm - -16
[ 1014.117839][ T6572] usb 11-1: USB disconnect, device number 7
[ 1014.159694][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1014.162956][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1014.169929][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1014.172574][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1014.176934][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1014.180714][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1014.184290][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1014.539615][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1014.541720][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1014.547080][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1014.550105][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1014.553116][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1014.557514][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1014.561576][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1015.458172][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1015.460182][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1015.464202][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1015.467203][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1015.470611][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1015.473965][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1015.477265][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1015.539551][T19229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1015.544057][T19229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.093230][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1016.095794][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1016.099418][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1016.102386][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1016.109019][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1016.119289][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1016.128746][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1016.246237][ T6488] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1016.397944][ T6488] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1016.402358][ T6488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1016.410334][ T6488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1016.414488][ T6488] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1016.420006][ T6488] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1016.424053][ T6488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.431093][ T6488] usb 5-1: config 0 descriptor??
[ 1016.861641][ T6488] hid_parser_main: 5 callbacks suppressed
[ 1016.861660][ T6488] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[ 1016.871793][ T6488] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[ 1016.874428][ T6488] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[ 1016.877201][ T6488] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[ 1016.880415][ T6488] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[ 1016.901043][ T6488] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1017.025732][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1017.028310][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1017.031489][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1017.033671][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1017.037898][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1017.041559][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1017.044877][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1017.464820][T19278] syz.4.3064: attempt to access beyond end of device
[ 1017.464820][T19278] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[ 1017.471002][T19278] gfs2: error -5 reading superblock
[ 1018.984990][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1018.986941][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1018.989892][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1018.992020][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1018.994184][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1018.998007][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1019.000925][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1019.016976][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1019.019001][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1019.022223][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1019.024494][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1019.029106][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1019.033186][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1019.037238][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1019.365714][ T6488] usb 5-1: USB disconnect, device number 28
[ 1020.070322][T19324] binder: 19323:19324 ioctl c00c6211 0 returned -14
[ 1020.080695][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1020.082969][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1020.095973][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1020.098544][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1020.100903][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1020.104823][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1020.120172][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1020.169738][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1020.171904][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1020.175895][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1020.178368][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1020.180584][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1020.195118][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1020.252277][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1020.371178][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1020.373797][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1020.378499][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1020.381121][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1020.383468][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1020.395643][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1020.400840][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1021.434580][T19360] loop9: detected capacity change from 0 to 7
[ 1021.441673][T19360] Dev loop9: unable to read RDB block 7
[ 1021.444013][T19360]  loop9: AHDI p1 p2
[ 1021.453150][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1021.453463][T19360] loop9: partition table partially beyond EOD, truncated
[ 1021.455929][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1021.458650][T19360] loop9: p1 size 4227858431 extends beyond EOD, truncated
[ 1021.463480][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1021.468283][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1021.471119][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1021.474594][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1021.478255][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1021.536014][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1021.539183][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1021.556699][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1021.559992][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1021.562543][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1021.575143][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1021.579135][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1021.648777][T16087] udevd[16087]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1021.775315][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1021.778919][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1021.791851][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1021.794620][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1021.805374][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1021.808726][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1021.825206][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1021.908332][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1021.910386][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1021.913996][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1021.925160][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1021.927845][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1021.931575][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1021.935134][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1022.938239][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1022.940535][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1022.946541][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1022.949250][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1022.951630][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1022.957582][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1022.961984][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1023.959143][T19401] syz.6.3103: attempt to access beyond end of device
[ 1023.959143][T19401] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[ 1023.963697][T19401] gfs2: error -5 reading superblock
[ 1024.133080][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1024.161447][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1024.181644][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1024.184453][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1024.230556][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1024.241784][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1024.253996][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1024.753513][T19411] overlayfs: failed to resolve './file0': -2
[ 1025.166622][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1025.168587][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1025.183905][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1025.187788][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1025.192904][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1025.203400][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1025.211817][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1026.072628][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1026.074566][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1026.080135][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1026.082541][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1026.084827][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1026.105982][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1026.109109][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1026.181381][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1026.183251][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1026.188635][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1026.190855][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1026.193011][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1026.213014][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1026.217650][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1026.231722][T19450] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3124'.
[ 1026.441625][T19463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1026.445133][T19463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1026.542375][T19465] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[ 1026.544592][T19465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1026.547753][T19465] vhci_hcd vhci_hcd.0: Device attached
[ 1026.795145][   T62] usb 37-1: new low-speed USB device number 24 using vhci_hcd
[ 1027.064296][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1027.066412][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1027.069634][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1027.071901][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1027.074520][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1027.078430][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1027.082144][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1027.098871][T19466] vhci_hcd: connection reset by peer
[ 1027.103368][T11687] vhci_hcd vhci_hcd.0: stop threads
[ 1027.105710][T11687] vhci_hcd vhci_hcd.0: release socket
[ 1027.108226][T11687] vhci_hcd vhci_hcd.0: disconnect device
[ 1027.145474][ T8102] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1027.220949][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1027.222971][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1027.226718][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1027.228963][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1027.231210][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1027.238238][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1027.241447][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1027.317457][ T8102] usb 6-1: Using ep0 maxpacket: 16
[ 1027.322210][ T8102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1027.325900][ T8102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1027.329347][ T8102] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1027.333602][ T8102] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1027.336998][ T8102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.345310][ T8102] usb 6-1: config 0 descriptor??
[ 1027.427939][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1027.429964][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1027.433750][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1027.436796][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1027.438947][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1027.442070][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1027.445666][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1027.481651][T19481] nbd: device at index 4 is going down
[ 1027.494989][ T6572] usb 11-1: new full-speed USB device number 8 using dummy_hcd
[ 1027.503664][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1027.506706][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1027.510335][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1027.512876][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1027.515638][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1027.519485][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1027.522893][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1027.685078][T19485] block nbd0: NBD_DISCONNECT
[ 1027.690805][ T6572] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1027.694318][ T6572] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1027.701673][ T6572] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1027.724159][ T6572] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.773101][ T8102] shield 0003:0955:7214.0005: unknown main item tag 0x0
[ 1027.778195][ T8102] shield 0003:0955:7214.0005: unknown main item tag 0x0
[ 1027.780715][ T8102] shield 0003:0955:7214.0005: unknown main item tag 0x0
[ 1027.783219][ T8102] shield 0003:0955:7214.0005: unknown main item tag 0x0
[ 1027.786995][ T8102] shield 0003:0955:7214.0005: unknown main item tag 0x0
[ 1027.792429][ T8102] input: HID 0955:7214 Haptics as /devices/virtual/input/input28
[ 1027.815538][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1027.825526][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1027.829076][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1027.831279][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1027.833720][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1027.843632][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1027.848980][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1027.864397][ T8102] shield 0003:0955:7214.0005: Registered Thunderstrike controller
[ 1027.868172][ T8102] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[ 1027.902926][T19491] input: syz0 as /devices/virtual/input/input29
[ 1027.961584][ T6572] usb 11-1: GET_CAPABILITIES returned 0
[ 1027.963665][ T6572] usbtmc 11-1:16.0: can't read capabilities
[ 1027.996700][T19472] netlink: 'syz.1.3129': attribute type 2 has an invalid length.
[ 1027.999616][T19472] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3129'.
[ 1028.022221][T19492] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1028.024030][ T6488] usb 6-1: USB disconnect, device number 23
[ 1028.038163][T19492] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1028.047516][T19492] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1028.052040][T19492] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1028.067353][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1028.069801][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1028.073099][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1028.077082][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1028.079824][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1028.083292][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1028.088089][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1028.183444][ T8102] usb 11-1: USB disconnect, device number 8
[ 1028.581723][T19503] netlink: 'syz.1.3140': attribute type 4 has an invalid length.
[ 1029.210873][T19520] kernel read not supported for file /rmdFΌμ (pid: 19520 comm: syz.4.3145)
[ 1029.247722][   T40] audit: type=1800 audit(1029.119:563): pid=19520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3145" name=726D64461716BCEC dev="mqueue" ino=66537 res=0 errno=0
[ 1029.260594][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1029.265982][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1029.269643][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1029.295265][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1029.297581][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1029.301666][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1029.315273][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1029.320758][ T8102] kernel read not supported for file /rmdFΌμ (pid: 8102 comm: kworker/1:8)
[ 1029.380762][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1029.385901][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1029.395292][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1029.397675][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1029.401142][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1029.407000][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1029.407836][T19523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1029.412864][T19523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1029.416062][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1029.949150][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1029.951857][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1029.959425][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1029.962757][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1029.977058][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1029.982620][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1029.992217][T19533] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1029.995228][T19533] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1029.996203][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1030.007647][T19533] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1030.030145][T19546] overlayfs: failed to resolve './file0': -2
[ 1030.361628][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1030.372380][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1030.384575][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1030.390705][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1030.396457][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1030.402290][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1030.408775][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1030.419559][T19561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.422838][T19561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1030.507889][T19559] overlayfs: failed to resolve './file1': -2
[ 1030.665184][T19561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.673969][T19561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1030.985112][ T6488] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1031.135075][ T6488] usb 6-1: Using ep0 maxpacket: 8
[ 1031.141982][ T6488] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1031.145370][ T6488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.148365][ T6488] usb 6-1: Product: syz
[ 1031.150162][ T6488] usb 6-1: Manufacturer: syz
[ 1031.152254][ T6488] usb 6-1: SerialNumber: syz
[ 1031.229416][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1031.232567][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1031.237138][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1031.240098][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1031.242323][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1031.247814][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1031.251439][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1031.266923][T19576] syzkaller1: entered promiscuous mode
[ 1031.269578][T19576] syzkaller1: entered allmulticast mode
[ 1031.372343][ T6488] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1031.417369][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1031.426584][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1031.431524][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1031.438382][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1031.447222][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1031.455748][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1031.462252][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1031.498269][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1031.500319][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1031.503919][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1031.507127][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1031.509374][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1031.513820][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1031.519024][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1031.700652][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1031.703174][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1031.710724][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1031.717024][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1031.775696][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1031.779494][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1031.782693][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1031.935305][   T62] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1031.945174][T14431] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1032.000307][T19591] syz.4.3166: attempt to access beyond end of device
[ 1032.000307][T19591] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[ 1032.004755][T19591] gfs2: error -5 reading superblock
[ 1032.143956][T19492] usb 6-1: USB disconnect, device number 24
[ 1032.179487][T19492] usblp0: removed
[ 1032.594141][T19593] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[ 1032.597046][T19593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1032.601271][T19593] vhci_hcd vhci_hcd.0: Device attached
[ 1032.835347][   T40] audit: type=1804 audit(1032.709:564): pid=19593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3167" name="/newroot/72/file0/file1" dev="overlay" ino=529 res=1 errno=0
[ 1032.868847][ T6572] usb 49-1: new low-speed USB device number 3 using vhci_hcd
[ 1033.023460][   T40] audit: type=1326 audit(1032.889:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19598 comm="syz.1.3169" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffd579 code=0x0
[ 1033.041959][T19594] vhci_hcd: connection reset by peer
[ 1033.044189][   T98] vhci_hcd vhci_hcd.6: stop threads
[ 1033.046936][   T98] vhci_hcd vhci_hcd.6: release socket
[ 1033.049268][   T98] vhci_hcd vhci_hcd.6: disconnect device
[ 1033.100819][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'.
[ 1033.105276][T19605] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1033.144835][T19607] overlayfs: failed to resolve './file0': -2
[ 1033.325265][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1033.335088][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1033.340014][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1033.340334][T19610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1033.347450][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1033.348367][T19610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1033.354581][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1033.366592][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1033.374397][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1033.914983][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1033.916951][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1033.922077][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1033.926435][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1033.928969][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1033.936019][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1033.939575][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1034.041080][T14431] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1034.079107][T19624] overlayfs: failed to resolve './file0': -2
[ 1034.417777][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1034.422740][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1034.436703][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1034.446006][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1034.448370][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1034.455940][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1034.460319][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1034.601264][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1034.603598][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1034.615970][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1034.618605][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1034.621150][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1034.626526][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1034.635192][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1034.789075][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1034.792035][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1034.806564][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1034.809509][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1034.812420][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1034.826315][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1034.830494][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1034.843988][T19641] syzkaller1: entered promiscuous mode
[ 1034.855277][T19641] syzkaller1: entered allmulticast mode
[ 1035.066266][T19650] nbd: device at index 6 is going down
[ 1035.101091][T19652] overlayfs: failed to resolve './file1': -2
[ 1035.215360][T19655] overlayfs: failed to resolve './file0': -2
[ 1035.544291][T19666] overlayfs: failed to resolve './file0': -2
[ 1035.796382][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1035.798343][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1035.802703][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1035.806302][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1035.808415][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1035.815963][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1035.825475][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1036.105461][T14431] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1036.187920][T19683] overlayfs: failed to resolve './file1': -2
[ 1036.672542][T19692] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[ 1036.674993][T19692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1036.680715][T19692] vhci_hcd vhci_hcd.0: Device attached
[ 1036.866843][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1036.869473][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1036.872713][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1036.875687][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1036.878041][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1036.881637][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1036.886229][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1036.924995][   T62] usb 37-1: new low-speed USB device number 25 using vhci_hcd
[ 1037.200208][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1037.202227][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1037.205706][T19686] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1037.205782][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1037.210965][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1037.213196][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1037.216200][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1037.226172][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1037.263114][T19693] vhci_hcd: connection reset by peer
[ 1037.265498][   T98] vhci_hcd vhci_hcd.0: stop threads
[ 1037.265516][   T98] vhci_hcd vhci_hcd.0: release socket
[ 1037.265569][   T98] vhci_hcd vhci_hcd.0: disconnect device
[ 1037.475534][T19711] overlayfs: failed to resolve './file1': -2
[ 1037.635403][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1037.638995][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1037.655550][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1037.658416][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1037.660754][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1037.683914][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1037.687854][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1037.713922][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1037.716290][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1037.719820][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1037.722020][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1037.724150][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1037.729231][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1037.735143][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1037.966452][T19729] overlayfs: failed to resolve './file1': -2
[ 1038.117419][ T6572] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1038.746145][T14431] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1038.797177][ T5351]  loop4: [POWERTEC] p1 p2 p3 p4 p5 p6
[ 1038.801641][ T5351] loop4: p1 size 2037579776 extends beyond EOD, truncated
[ 1038.810844][ T5351] loop4: p2 start 4294901760 is beyond EOD, truncated
[ 1038.813076][ T5351] loop4: p3 start 4294836224 is beyond EOD, truncated
[ 1038.815726][ T5351] loop4: p4 size 327680 extends beyond EOD, truncated
[ 1038.818892][ T5351] loop4: p5 size 8323072 extends beyond EOD, truncated
[ 1038.822588][ T5351] loop4: p6 start 8192 is beyond EOD, truncated
[ 1038.929605][T19754] 
[ 1038.930661][T19754] ======================================================
[ 1038.933014][T19754] WARNING: possible circular locking dependency detected
[ 1038.935763][T19754] syzkaller #0 Tainted: G             L     
[ 1038.938419][T19754] ------------------------------------------------------
[ 1038.941386][T19754] syz.6.3223/19754 is trying to acquire lock:
[ 1038.943592][T19754] ffff88806ddd8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[ 1038.946531][T19754] 
[ 1038.946531][T19754] but task is already holding lock:
[ 1038.949100][T19754] ffff88806ae84c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[ 1038.951970][T19754] 
[ 1038.951970][T19754] which lock already depends on the new lock.
[ 1038.951970][T19754] 
[ 1038.955306][T19754] 
[ 1038.955306][T19754] the existing dependency chain (in reverse order) is:
[ 1038.958238][T19754] 
[ 1038.958238][T19754] -> #2 (&pipe->mutex){+.+.}-{4:4}:
[ 1038.960626][T19754]        __mutex_lock+0x1aa/0x1ca0
[ 1038.962314][T19754]        anon_pipe_write+0x15d/0x1bd0
[ 1038.964054][T19754]        __kernel_write_iter+0x720/0xb10
[ 1038.965991][T19754]        __kernel_write+0xf5/0x140
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1038.967810][T19754]        autofs_notify_daemon+0x4db/0xd60
[ 1038.970058][T19754]        autofs_wait+0x10f3/0x1ac0
[ 1038.971939][T19754]        autofs_mount_wait+0x132/0x3c0
[ 1038.973799][T19754]        autofs_d_automount+0x4b2/0x960
[ 1038.975843][T19754]        __traverse_mounts+0x1b9/0x830
[ 1038.978121][T19754]        step_into_slowpath+0x772/0xf50
[ 1038.980403][T19754]        path_lookupat+0x627/0xc40
[ 1038.982512][T19754]        filename_lookup+0x224/0x5f0
[ 1038.984691][T19754]        kern_path+0x35/0x50
[ 1038.986785][T19754]        lookup_bdev+0xd8/0x280
[ 1038.988797][T19754]        resume_store+0x1d6/0x490
[ 1038.990897][T19754]        kobj_attr_store+0x58/0x80
[ 1038.993020][T19754]        sysfs_kf_write+0xf2/0x150
[ 1038.995285][T19754]        kernfs_fop_write_iter+0x3af/0x570
[ 1038.998201][T19754]        vfs_write+0x7d3/0x11d0
[ 1038.999904][T19754]        ksys_write+0x12a/0x250
[ 1039.001768][T19754]        __do_fast_syscall_32+0xe8/0x680
[ 1039.003965][T19754]        do_fast_syscall_32+0x32/0x80
[ 1039.006057][T19754]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1039.008497][T19754] 
[ 1039.008497][T19754] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}:
[ 1039.011088][T19754]        __mutex_lock+0x1aa/0x1ca0
[ 1039.012954][T19754]        autofs_notify_daemon+0x4a6/0xd60
[ 1039.015320][T19754]        autofs_wait+0x10f3/0x1ac0
[ 1039.017021][T19754]        autofs_mount_wait+0x132/0x3c0
[ 1039.018939][T19754]        autofs_d_automount+0x4b2/0x960
[ 1039.020856][T19754]        __traverse_mounts+0x1b9/0x830
[ 1039.022874][T19754]        step_into_slowpath+0x772/0xf50
[ 1039.024921][T19754]        path_lookupat+0x627/0xc40
[ 1039.026716][T19754]        filename_lookup+0x224/0x5f0
[ 1039.028712][T19754]        kern_path+0x35/0x50
[ 1039.030317][T19754]        lookup_bdev+0xd8/0x280
[ 1039.031953][T19754]        resume_store+0x1d6/0x490
[ 1039.033745][T19754]        kobj_attr_store+0x58/0x80
[ 1039.035924][T19754]        sysfs_kf_write+0xf2/0x150
[ 1039.037712][T19754]        kernfs_fop_write_iter+0x3af/0x570
[ 1039.039696][T19754]        vfs_write+0x7d3/0x11d0
[ 1039.041250][T19754]        ksys_write+0x12a/0x250
[ 1039.043101][T19754]        __do_fast_syscall_32+0xe8/0x680
[ 1039.044965][T19754]        do_fast_syscall_32+0x32/0x80
[ 1039.046965][T19754]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1039.049540][T19754] 
[ 1039.049540][T19754] -> #0 (&of->mutex){+.+.}-{4:4}:
[ 1039.051988][T19754]        __lock_acquire+0x1669/0x2890
[ 1039.053921][T19754]        lock_acquire+0x179/0x330
[ 1039.055646][T19754]        __mutex_lock+0x1aa/0x1ca0
[ 1039.057381][T19754]        kernfs_fop_write_iter+0x28f/0x570
[ 1039.059321][T19754]        iter_file_splice_write+0xa24/0x12b0
[ 1039.061296][T19754]        do_splice+0x1478/0x1fc0
[ 1039.062940][T19754]        __do_splice+0x32a/0x360
[ 1039.064570][T19754]        __ia32_sys_splice+0x189/0x250
[ 1039.066491][T19754]        __do_fast_syscall_32+0xe8/0x680
[ 1039.068326][T19754]        do_fast_syscall_32+0x32/0x80
[ 1039.070061][T19754]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1039.072745][T19754] 
[ 1039.072745][T19754] other info that might help us debug this:
[ 1039.072745][T19754] 
[ 1039.076712][T19754] Chain exists of:
[ 1039.076712][T19754]   &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex
[ 1039.076712][T19754] 
[ 1039.080902][T19754]  Possible unsafe locking scenario:
[ 1039.080902][T19754] 
[ 1039.083641][T19754]        CPU0                    CPU1
[ 1039.085489][T19754]        ----                    ----
[ 1039.087289][T19754]   lock(&pipe->mutex);
[ 1039.088743][T19754]                                lock(&sbi->pipe_mutex);
[ 1039.091090][T19754]                                lock(&pipe->mutex);
[ 1039.093350][T19754]   lock(&of->mutex);
[ 1039.094723][T19754] 
[ 1039.094723][T19754]  *** DEADLOCK ***
[ 1039.094723][T19754] 
[ 1039.098296][T19754] 2 locks held by syz.6.3223/19754:
[ 1039.100472][T19754]  #0: ffff888020598420 (sb_writers#7){.+.+}-{0:0}, at: __do_splice+0x32a/0x360
[ 1039.104278][T19754]  #1: ffff88806ae84c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[ 1039.108260][T19754] 
[ 1039.108260][T19754] stack backtrace:
[ 1039.110806][T19754] CPU: 0 UID: 0 PID: 19754 Comm: syz.6.3223 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1039.110838][T19754] Tainted: [L]=SOFTLOCKUP
[ 1039.110845][T19754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1039.110858][T19754] Call Trace:
[ 1039.110867][T19754]  <TASK>
[ 1039.110876][T19754]  dump_stack_lvl+0x116/0x1f0
[ 1039.110910][T19754]  print_circular_bug+0x275/0x340
[ 1039.110941][T19754]  check_noncircular+0x146/0x160
[ 1039.110972][T19754]  __lock_acquire+0x1669/0x2890
[ 1039.110992][T19754]  ? __do_splice+0x32a/0x360
[ 1039.111018][T19754]  ? __do_fast_syscall_32+0xe8/0x680
[ 1039.111049][T19754]  lock_acquire+0x179/0x330
[ 1039.111064][T19754]  ? kernfs_fop_write_iter+0x28f/0x570
[ 1039.111097][T19754]  ? __pfx___might_resched+0x10/0x10
[ 1039.111130][T19754]  __mutex_lock+0x1aa/0x1ca0
[ 1039.111159][T19754]  ? kernfs_fop_write_iter+0x28f/0x570
[ 1039.111187][T19754]  ? kernfs_fop_write_iter+0x28f/0x570
[ 1039.111214][T19754]  ? __asan_memcpy+0x3c/0x60
[ 1039.111238][T19754]  ? __pfx___mutex_lock+0x10/0x10
[ 1039.111266][T19754]  ? __pfx__copy_from_iter+0x10/0x10
[ 1039.111289][T19754]  ? trace_kmalloc+0x2b/0xb0
[ 1039.111314][T19754]  ? __kmalloc_noprof+0x35d/0x910
[ 1039.111333][T19754]  ? kernfs_fop_write_iter+0x237/0x570
[ 1039.111360][T19754]  ? kernfs_fop_write_iter+0x28f/0x570
[ 1039.111384][T19754]  kernfs_fop_write_iter+0x28f/0x570
[ 1039.111412][T19754]  iter_file_splice_write+0xa24/0x12b0
[ 1039.111446][T19754]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1039.111474][T19754]  ? find_held_lock+0x2b/0x80
[ 1039.111502][T19754]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1039.111529][T19754]  do_splice+0x1478/0x1fc0
[ 1039.111555][T19754]  ? __lock_acquire+0x436/0x2890
[ 1039.111571][T19754]  ? __lock_acquire+0x436/0x2890
[ 1039.111587][T19754]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1039.111610][T19754]  ? __pfx_do_splice+0x10/0x10
[ 1039.111634][T19754]  ? __pfx_pipe_clear_nowait+0x10/0x10
[ 1039.111660][T19754]  ? find_held_lock+0x2b/0x80
[ 1039.111684][T19754]  __do_splice+0x32a/0x360
[ 1039.111711][T19754]  ? __pfx___do_splice+0x10/0x10
[ 1039.111740][T19754]  __ia32_sys_splice+0x189/0x250
[ 1039.111768][T19754]  __do_fast_syscall_32+0xe8/0x680
[ 1039.111796][T19754]  do_fast_syscall_32+0x32/0x80
[ 1039.111812][T19754]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1039.111834][T19754] RIP: 0023:0xf703d579
[ 1039.111849][T19754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1039.111866][T19754] RSP: 002b:00000000f540c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139
[ 1039.111884][T19754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 1039.111895][T19754] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000000bfd1
[ 1039.111906][T19754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1039.111916][T19754] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1039.111927][T19754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1039.111944][T19754]  </TASK>
[ 1039.291314][ T6488] usb 9-1: USB disconnect, device number 6
[ 1039.298881][T16087] udevd[16087]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 1039.317349][T14561] udevd[14561]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[ 1039.485937][T18750] udevd[18750]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[ 1039.951515][   T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.069538][   T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.181614][   T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.268844][   T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.382867][   T46] bridge_slave_1: left allmulticast mode
[ 1040.385749][   T46] bridge_slave_1: left promiscuous mode
[ 1040.387907][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1040.391868][   T46] bridge_slave_0: left allmulticast mode
[ 1040.394290][   T46] bridge_slave_0: left promiscuous mode
[ 1040.396635][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.513817][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1040.518830][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1040.522408][   T46] bond0 (unregistering): Released all slaves
[ 1040.850316][   T46] hsr_slave_0: left promiscuous mode
[ 1040.852676][   T46] hsr_slave_1: left promiscuous mode
[ 1040.856907][   T46] veth1_macvtap: left promiscuous mode
[ 1040.859234][   T46] veth0_macvtap: left promiscuous mode
[ 1040.861052][   T46] veth1_vlan: left promiscuous mode
[ 1040.863057][   T46] veth0_vlan: left promiscuous mode
[ 1041.341733][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1041.363099][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1041.788833][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.853955][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.947861][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.016275][   T62] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1042.034151][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.403862][   T13] bond1: (slave netdevsim0): Releasing backup interface
[ 1042.502077][   T13] team0: left allmulticast mode
[ 1042.504152][   T13] bond0: left allmulticast mode
[ 1042.506738][   T13] geneve0: left allmulticast mode
[ 1042.509687][   T13] bridge0: port 1(team0) entered disabled state
[ 1042.732517][   T13] geneve0 (unregistering): left promiscuous mode
[ 1042.735371][   T13] team0: Port device geneve0 removed
[ 1042.876500][   T13] bond0 (unregistering): left promiscuous mode
[ 1042.879681][   T13] team0: Port device bond0 removed
[ 1042.882315][   T13] bond0 (unregistering): Released all slaves
[ 1043.003318][   T13] bond1 (unregistering): Released all slaves
[ 1043.104374][   T13] bond2 (unregistering): Released all slaves
[ 1043.275115][   T46] smc: removing ib device syz1
[ 1043.292511][   T13] team0: Port device bridge1 removed
[ 1043.460501][   T13] team0: Port device .` removed
[ 1043.462626][   T13] .` (unregistering): Released all slaves
[ 1043.465764][   T13] bond1 (unregistering): Released all slaves
[ 1043.471233][T13061] geneve1 speed is unknown, defaulting to 1000
[ 1045.174443][   T13] tipc: Disabling bearer <udp:syz2>
[ 1045.176593][   T13] tipc: Left network mode
[ 1045.220074][   T13] IPVS: stopping master sync thread 6642 ...
[ 1046.047563][   T13] hsr_slave_0: left promiscuous mode
[ 1046.050190][   T13] hsr_slave_1: left promiscuous mode
[ 1046.054633][   T13] hsr_slave_0: left promiscuous mode
[ 1046.057542][   T13] hsr_slave_1: left promiscuous mode
[ 1046.091141][   T13] pim6reg (unregistering): left allmulticast mode
[ 1047.915734][   T13] IPVS: stop unused estimator thread 0...
[ 1047.919221][   T13] IPVS: stop unused estimator thread 0...